The Japanese carmaker has already announced its second cyberattack in the past five weeks. This time, the criminals targeted the company’s headquarters in Japan, whereas in February 2019, unknown attackers had already attacked the Toyota division in Australia.
It is reported that the criminals breached the company’s systems and managed to gain access to the data of 3.1 million Toyota and Lexus car owners. What type of information was available to the unspecified intruders remains under investigation. It is only known that customers’ financial data was not compromised, and that the leak affected information from Toyota Tokyo Sales Holdings, Tokyo Motorola, Toyota Toyopet, Toyota Tokyo Corolla, Toyota Nets Tokyo Tokyo, Lexus Nerima and Toyota West Tokyo Corolla.
Allow me to remind you that the attack carried out against Toyota’s Australian division in February of this year was far more destructive. The affected unit actually lost the opportunity to sell and deliver new cars. Subsequently, FireEye security experts suggested that the incident may have been carried out by APT32, the Vietnamese cyberespionage group. Experts believe the hackers were thus attempting to reach the company’s headquarters in Japan.
In addition, alongside the report on the attack on Toyota’s Japanese division, information has emerged about an attack on the company’s Vietnamese branch, but no details about this incident are known yet.
